Medium: exim

Issue Overview: This is an update fixeing dec64table OOB read in b64decode. Affected Packages: exim Issue Correction: Run yum update exim or yum update --advisory ALAS-2018-997 to update your system. New Packages: i686: exim-mysql-4.90.1-3.15.amzn1.i686 exim-mon-4.90.1-3.15.amzn1.i686 ...

Exim Off-by-One RCE vulnerability of CVE-2018-6789 use analysis(reference EXP)-vulnerability warning-the black bar safety net

Statement: disclosed herein is a method and script for study and research use, any team or individual may use the disclosure herein related to content engaged in the illegal network attacks, otherwise all the consequences by the user himself to bear with the author of this article has nothing to...

[SECURITY] Fedora 28 Update: exim-4.90.1-4.fc28

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

Fedora Update for exim FEDORA-2018-db9adf44c9

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for exim FEDORA-2018-a0cca16ec6

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : exim (2018-a0cca16ec6)

This is an update fixing dec64table OOB read in b64decode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 27 : exim (2018-db9adf44c9)

This is an update fixing dec64table OOB read in b64decode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

[SECURITY] Fedora 26 Update: exim-4.90.1-3.fc26

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

The vulnerability of the base64D function in the STMP listener component of the Exim mail server allows a attacker to execute arbitrary code.

The vulnerability of the base64 component of the STMP listener in the Exim mail server arises from buffer overflows during data processing, where the size of the buffer is not a multiple of 4 4n + 3. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

PT-2019-2859

Name of the Vulnerable Software and Affected Versions Exim versions 4.87 through 4.91 Description The issue is related to improper validation of recipient addresses in the deliver message function, located in /src/deliver.c, which may lead to remote command execution. This flaw can be exploited b...

Amazon Linux AMI : exim (ALAS-2018-970)

Buffer overflow in b64decode function, possibly leading to remote code execution : An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely. CVE-2018-6789 C...

Exim < 4.90.1 RCE Vulnerability - Version Check

Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim";...

GLSA-201803-01 : Exim: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-01 Exim: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by connecting to the SMTP listener daemon,...

Critical: exim

Issue Overview: Buffer overflow in b64decode function, possibly leading to remote code execution: An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...

Internet Bug Bounty: Exim off-by-one RCE vulnerability

Hi, I found an off-by-one in Exim MTA utility function. It was reported to exim and official patch has been released, assigned CVE-2018-6789. This bug affects all versions of exim. This bug is simple, but can be leverage to gain remote code execution, using skillful heap exploitation. Details are...

Exim < 4.90.1 Buffer Overflow RCE Vulnerability

According to its banner, the version of Exim running on the remote host is prior to 4.90.1. It is, therefore, potentially affected by a buffer overflow vulnerability. A flaw exists base64d function due to improper validation of parsed messages. A remote attacker could potentially cause a buffer...

Exim < 4.90.1 Remote Code Execution

Binary data 700223.prm...

Exim: Multiple vulnerabilities

Background Exim is a message transfer agent MTA designed to be a a highly configurable, drop-in replacement for sendmail. Description Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by connecting to t...

Fedora Update for exim FEDORA-2018-5aec14e125

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : exim (2018-25a7ba3cb6)

This is an update fixing mysql module. ---- This is new version fixing CVE-2018-6789. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...